I tried to add LDAP authentication using module openvpn-auth-ldap and I see some troubles: [list] [*] this LDAP module cannot work correctry using SSL (ldaps); [*] if I add module openvpn-auth-ldap, I cannot to use certificate authentication; [/list] I need to make next configuration of my server: [list][*]using certificate for authentication; [*]if no certificate - check login and passoword using LDAPs; [*]if no login and password - reject with authentication. [/list] I would to ask - should I create a script or can it be implemented using standard method??

[quote=Yacudzer post_id=94186 time=1599061197 user_id=50190] should I create a script or can it be implemented using standard method?? [/quote]There are options which get you [i]part way[/i] there. See the manual for --client-cert-not-required and --auth-user-pass-optional Your script will [i]ultimately[/i] have to be [b]the arbiter[/b] ..

LDAP or certificate authentication

Yacudzer

I tried to add LDAP authentication using module openvpn-auth-ldap and I see some troubles:

this LDAP module cannot work correctry using SSL (ldaps);
if I add module openvpn-auth-ldap, I cannot to use certificate authentication;

I need to make next configuration of my server:

using certificate for authentication;
if no certificate - check login and passoword using LDAPs;
if no login and password - reject with authentication.

I would to ask - should I create a script or can it be implemented using standard method??

TinCanTech

Yacudzer wrote should I create a script or can it be implemented using standard method??

There are options which get you part way there.

See the manual for --client-cert-not-required and --auth-user-pass-optional

Your script will ultimately have to be the arbiter ..

TinCanTech

Also, EasyTLS could provide you the security barrier which you seek:
https://github.com/TinCanTech/easy-tls

Yacudzer

TinCanTech wrote
Yacudzer wrote should I create a script or can it be implemented using standard method??
There are options which get you part way there.

See the manual for --client-cert-not-required and --auth-user-pass-optional

Your script will ultimately have to be the arbiter ..

I understanding that such task cannot be solved without a script?

And I read that using option --verify-client-cert better than --client-cert-not-required, isnt it?
And with wich option I must to start verification script?
Thanks!

Bernard12

I have written a python script which contains a menu in an infinite loop. My goal is start the script in terminal when a user logs in and start interacting with it. I have created a launcher.sh file which will execute on startup and registered it in crontab. However, when system reboots it gives following error.

alaskasworld.com